| ZeroBOX

file.exe "C:\Users\test22\AppData\Local\Temp\file.exe"
444
- RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
  2436
  - innkmiukfdgrakq.exe "C:\Users\test22\AppData\Local\Temp\innkmiukfdgrakq.exe"
    2632
    - cmd.exe cmd /c ""C:\Users\test22\AppData\Local\Temp\s214.0.bat" "
      2732
      - timeout.exe timeout 3
        2792
      - XRJNZC.exe "C:\ProgramData\pinterests\XRJNZC.exe"
        2904
        
        schtasks.exe "C:\Windows\System32\schtasks.exe" /create /sc MINUTE /mo 1 /RL HIGHEST /tn "XRJNZC" /tr C:\ProgramData\pinterests\XRJNZC.exe /f
        3052
  - cwdeprxrvlonbdrjec.exe "C:\Users\test22\AppData\Local\Temp\cwdeprxrvlonbdrjec.exe"
    2676
  - wgkpgkairhk.exe "C:\Users\test22\AppData\Local\Temp\wgkpgkairhk.exe"
    2828
    - Utsysc.exe "C:\Users\test22\AppData\Local\Temp\4fdb51ccdc\Utsysc.exe"
      1836
      - schtasks.exe "C:\Windows\System32\schtasks.exe" /Create /SC MINUTE /MO 1 /TN Utsysc.exe /TR "C:\Users\test22\AppData\Local\Temp\4fdb51ccdc\Utsysc.exe" /F
        2488
      - rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Roaming\80c6bf70bf3f8f\cred64.dll, Main
        1284
        
        rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Roaming\80c6bf70bf3f8f\cred64.dll, Main
        2160
        
        netsh.exe netsh wlan show profiles
        2708
      - rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Roaming\80c6bf70bf3f8f\clip64.dll, Main
        2916
explorer.exe C:\Windows\Explorer.EXE
1236

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents